Who we are
Samaryam Tech Ltd, registered in Scotland, company number SC887438 is responsible for the personal information described in this notice. Our registered office is Office 1605, 3 Fitzroy Place, 1/1, Sauchiehall Street, Glasgow, G3 7RH. Contact us at contact@samaryam.com or on 0141 474 9012.
This notice covers this website and enquiries about our services. Information handling for an agreed client engagement is addressed in the relevant engagement documents.
What we collect
When you contact us, we collect your name, email address, the service you are interested in and any organisation details or message you choose to provide. Your name and email address are needed so we can respond. Organisation details and a message are optional.
When you request a document or service information sheet, we collect your name, email address, any organisation name you provide, the document requested and the page it was requested from. Organisation is optional.
Our hosting and form providers may also process technical information such as your IP address, browser information, request times and security logs. This public review website can be viewed without signing in. Authentication information may be processed if you use hosting features that require sign-in.
Authorised workspace members sign in through Supabase to access the Samaryam portal and their assigned tools. We store their account identifier, email address, workspace role, application access permissions and account status. Owners can create one-time account setup links and manage access. Access changes record the acting and affected account identifiers, the permissions changed and the time. Members can enrol an authenticator app for two-step verification. Portal pages are excluded from website analytics. Authorised content editors use the portal to manage website content. Supabase processes the administrator email address, authentication credentials and session information needed to provide and secure that access. Ordinary visitors do not need an account. We store the account identifier associated with their editorial changes, saved drafts, published content, revision history and uploaded files. Team profiles contain the professional information and photographs we choose to publish. Drafts and editorial history are restricted to authorised administrators.
Please avoid putting passwords, confidential client information or sensitive personal information into the enquiry form.
Website analytics
We use first-party website analytics to understand traffic, useful content and enquiries. Basic request counters group page requests by time, page, referring website domain, campaign label, approximate country, broad device type and browser family. We do not store IP addresses, full referrer URLs, URL query strings, raw user agent strings or form contents in these analytics records. Administrator visits are excluded.
If you allow optional analytics, your browser creates random visitor and visit identifiers. The server stores keyed hashes of those identifiers, page views, foreground engagement estimates, scroll depth and actions such as opening an enquiry, a successful form submission or a document download. This allows us to estimate unique browsers, returning browsers, visits and conversions. Our lawful basis for this optional measurement is your consent. We do not send these records to advertising platforms, join them to enquiry details or record sessions.
To prevent automated abuse of optional analytics, we keep separate security counters containing keyed hashes of network addresses. We do not store raw IP addresses in these counters. Counters older than two days are deleted when the next measurement is checked.
You can refuse optional analytics or withdraw permission on the Cookies & Preferences page. Choosing analytics off removes the visitor and visit identifiers from your browser and stops future measurement from that browser, including basic request counters when the preference is sent. We also respect supported browser privacy signals. Previously collected records expire under the retention period rather than being linked to your enquiry account.
Analytics uses a 90-day reporting window. Older records are removed automatically when collection or reporting next runs. Reports are available only to authorised administrators as aggregate figures. The active analytics database is hosted by Supabase in our selected London region, with our website delivered through OpenAI and Cloudflare. A restricted copy of the previous database is retained temporarily to support and verify the migration and will not receive new measurements after the switch. Country and crawler classification are estimates and may be unavailable or inaccurate. Visitors who refuse analytics are not included in unique visitor or conversion figures.
Why we use your information
We use enquiry details to answer your questions, arrange a discussion, understand the support you are looking for and prepare a proposal where requested. We record document requests, make the requested PDF available and respond to any questions about that service. We use technical information to deliver and protect the website and prevent misuse.
For general enquiries and business contact details, our lawful basis is legitimate interests: responding to people who contact us about our services, handling requested service information and operating a secure website. Where you personally ask us to take steps towards a contract with you, we rely on the steps necessary before entering that contract. Legal obligations may apply where we must retain or disclose information by law.
Submitting an enquiry or requesting a document does not subscribe you to marketing emails. We do not use website enquiries to make solely automated decisions with legal or similarly significant effects.
Document request checks
We check email address format, known temporary email providers and the domain’s mail records when you request a document. Domain lookups share only the domain, not your full email address, with Cloudflare’s or Google’s DNS service. We use pseudonymous request counters in Supabase to limit repeated requests. These checks do not establish who owns a mailbox.
Once your request passes the checks and is accepted by our form provider, the document downloads directly from this website. We send your contact details, the requested document and the source page to Formspree so we can respond to related questions. Requesting a document does not subscribe you to marketing emails.
Who receives your information
The enquiry form sends your details to Formspree. Document requests are first validated by our website before being sent to Formspree; the website returns the PDF only after the submission is accepted. Formspree processes and stores submissions and forwards them to our email inbox. Our email provider processes the resulting correspondence. Our website hosting and delivery providers, including OpenAI and Cloudflare for this version, process information needed to host and deliver the website. Supabase provides the application database and administrator authentication; published content, private drafts, editorial history, file metadata and analytics are stored in that database. Uploaded files remain in our protected Cloudflare storage. See Supabase’s privacy information and data processing addendum.
Relevant information may also be shared with professional advisers or authorities where necessary to deal with a legal matter or meet an obligation. We do not sell enquiry details.
Formspree explains its own processing in its privacy policy.
Processing outside the UK
Formspree states that its services are hosted in the United States. Its published security information says it relies on Standard Contractual Clauses as a data processor. Other service providers may also process information outside the UK.
You can contact us for information about processing locations and the safeguards relevant to your enquiry. The provider’s general GDPR statement does not, by itself, establish which UK transfer arrangements apply to our account.
How long information is kept
We keep enquiries and document requests while handling them and for any reasonable follow up relating to that request. When deciding whether it is still needed, we consider whether the discussion is active, whether a proposal or engagement is progressing, and whether a complaint, legal obligation or potential claim requires a record.
Where an enquiry leads to an engagement, the relevant correspondence forms part of the engagement record. When enquiry information is no longer needed, we delete it from both the Formspree account and our email records. Provider backups and security logs may follow the provider’s own retention arrangements.
Your rights and your right to object
Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, or receive certain information in a portable format.
You can object to processing based on legitimate interests. We will consider your request and explain where a legal exception or continuing obligation applies. Contact contact@samaryam.com to make a request. We may need information to confirm your identity.
If a separate activity relies on your consent, you can withdraw it without affecting the lawfulness of earlier use. For website preferences, see Cookies & Preferences.
Questions and complaints
Please contact contact@samaryam.com if you have a concern about how your information is handled. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We will update this notice when the website or our information handling changes. The date at the top shows when it was last updated.
